072c27df3efc99d25035a17914112330_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

072c27df3efc99d25035a17914112330_NeikiAnalytics.exe
Size

63KB
MD5

072c27df3efc99d25035a17914112330
SHA1

a1df55fe6b2ba48b4e696a955da3dcc15bd9a39f
SHA256

117e11b9d899553927f4a9d5403ed9af91b2ba83250c0280f68c50a6574857bf
SHA512

027dbba4f292bfda83a3b01d556b145a973b9830d4273647baa0bf779d5e9d55c8f97f43e0121532bb7d10b63b65b777a3fc2aa2f1509d2bdd37db1111f21ba0
SSDEEP

1536:WveBTDLmsU7J/IyjjscHA2THGtbt3hnouy8nzLJx:hXmL/xu2THGz3BoutzL

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

072c27df3efc99d25035a17914112330_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5a:34:a5:b6:36:56:3d:f6:b7:a1:f0:7f:b5:f2:39:79
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

08/12/2022, 00:00

Not After

09/01/2026, 23:59

Subject

CN=Martin Tofall,O=Martin Tofall,ST=Nordrhein-Westfalen,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

d3:85:5b:ed:15:52:93:a5:d8:06:92:24:34:87:33:49:82:f0:94:f1:5a:9a:ae:bf:90:93:37:7d:d5:ad:eb:30
Signer

Actual PE Digest

d3:85:5b:ed:15:52:93:a5:d8:06:92:24:34:87:33:49:82:f0:94:f1:5a:9a:ae:bf:90:93:37:7d:d5:ad:eb:30

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

obsBlacklistLicenses
obsCallMark
obsConvertLicenseToBinary
obsConvertLicenseToString
obsDecTrialCounter
obsDeleteLicenseData
obsDeleteTrialData
obsDisableLicense
obsEncDecData
obsGetActiveLicensingSystem
obsGetCustomValue
obsGetExpirationDate
obsGetInitialTrialCounter
obsGetInitialTrialDays
obsGetInitialTrialRuns
obsGetInstanceCount
obsGetLastTrialDate
obsGetLicenseCreation
obsGetLicenseData
obsGetLicenseExpiration
obsGetLicenseHash
obsGetLicenseInfo
obsGetLicenseInfoEx
obsGetLicenseInfoExW
obsGetLicenseInfoW
obsGetLicenseStatus
obsGetLicenseSystemId
obsGetProtectionDate
obsGetSystemId
obsGetTrialCounter
obsGetTrialDays
obsGetTrialEndDate
obsGetTrialIdentifier
obsGetTrialRuns
obsIsLicensed
obsIsProtected
obsIsVm
obsNetLicConnect
obsNetLicConnectEx
obsNetLicDisconnect
obsNetLicGetAppCertId
obsNetLicGetAppCertName
obsNetLicGetAppCertUserData
obsNetLicRegisterCallback
obsReloadLicense
obsReprotectString
obsSecureString
obsSecureStringW
obsSetExternalKey
obsSetLicense
obsSetLicenseShort
obsSetLicenseShortW
obsSetLicenseW
obsStoreLicense
obsStoreLicenseShort
obsStoreLicenseShortW
obsStoreLicenseW
obsUsbDecrypt
obsUsbEncrypt
obsUsbEnumDevices
obsUsbExecute
obsUsbGetDeviceId
obsUsbGetLicenseDeviceId
obsUsbReadData
obsUsbRegisterCallback
obsUsbWriteData
obsVerifyLicense
obsVerifyLicenseShort
obsVerifyLicenseShortW
obsVerifySignatureData
obsVerifySignatureFile
obsVerifySignatureFileW

Sections

UPX0
Size: - Virtual size: 220KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

5a:34:a5:b6:36:56:3d:f6:b7:a1:f0:7f:b5:f2:39:79Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

d3:85:5b:ed:15:52:93:a5:d8:06:92:24:34:87:33:49:82:f0:94:f1:5a:9a:ae:bf:90:93:37:7d:d5:ad:eb:30Signer

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 220KB

UPX1 Size: 48KB - Virtual size: 48KB

.rsrc Size: 3KB - Virtual size: 4KB

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

5a:34:a5:b6:36:56:3d:f6:b7:a1:f0:7f:b5:f2:39:79
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

d3:85:5b:ed:15:52:93:a5:d8:06:92:24:34:87:33:49:82:f0:94:f1:5a:9a:ae:bf:90:93:37:7d:d5:ad:eb:30
Signer

UPX0
Size: - Virtual size: 220KB

UPX1
Size: 48KB - Virtual size: 48KB

.rsrc
Size: 3KB - Virtual size: 4KB